by Kastro
Paper/Archive/CVE-2026-85497

CVE-2026-85497

CareCam HMT.CM2507 Firmware — CareCam CM2507 Use of Password Hash With Insufficient Computational Effort

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 28.0.280 × 205.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated credential, which may also be reusable across other devices running the same firmware.

Affected

ProductAffectedFixed inSource
HMT.CM2507 Firmwarev251211.1507–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-258-08refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-08.json